GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: k3s, commercial-expanso-edge, containerd, omnictl-multiarch-fips, cilium, kaf, snyk-cli, kots, k3d, commercial-grafana, zot, minio, cert-manager, nerdctl, kine, kyverno, aactl, prometheus, reports-server, omnictl-multiarch, prometheus-mongodb-exporter,...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Framework [CVE-2026-41839, CVE-2026-41840, CVE-2026-41845, CVE-2026-41853, CVE-2026-41854]

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Framework CVE-2026-41839, CVE-2026-41840, CVE-2026-41845, CVE-2026-41853, CVE-2026-41854. Spring Framework is used as part of our microservices. These vulnerabilities have been addressed. Please read the detai...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: beats-fips, helm-operator-fips, k8s-agents-operator-fips, backup-restore-operator-fips, rancher-agent, elastic-agent, cluster-api-ipam-provider-in-cluster, kubescape, crossplane-provider-kubernetes-fips, volsync-fips, cass-operator-fips-no-pvc-delete, descheduler-fip...

GHSA-GG3M-VVP2-P2C5 vulnerabilities

Vulnerabilities for packages: sqlexporter, pguser, terraform-provider-azapi, telegraf, ko, golangci-lint, flux-source-controller, kubernetes, flux-notification-controller, sftpgo-plugin-eventsearch, kube-rbac-proxy, cilium-cli, step-issuer, kyverno-policy-reporter, helm, metrics-server, vendir,...

CVE-2026-46600 vulnerabilities

Vulnerabilities for packages: sqlexporter, pguser, terraform-provider-azapi, telegraf, ko, golangci-lint, flux-source-controller, kubernetes, flux-notification-controller, sftpgo-plugin-eventsearch, kube-rbac-proxy, cilium-cli, step-issuer, kyverno-policy-reporter, helm, metrics-server, vendir,...

GHSA-GG3M-VVP2-P2C5 vulnerabilities

Vulnerabilities for packages: helm-operator-fips, elastic-agent, prometheus-elasticsearch-exporter, snyk-cli, crossplane-provider-aws-fis, speedtest-go, azurefile-csi-fips, fulcio-fips, kubernetes-dashboard, prometheus, tflint-fips, cloudnative-pg-fips, envconsul-fips, crossplane-provider-keycloa...

CVE-2026-46600 vulnerabilities

Vulnerabilities for packages: helm-operator-fips, elastic-agent, prometheus-elasticsearch-exporter, snyk-cli, crossplane-provider-aws-fis, speedtest-go, azurefile-csi-fips, fulcio-fips, kubernetes-dashboard, prometheus, tflint-fips, cloudnative-pg-fips, envconsul-fips, crossplane-provider-keycloa...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: beats-fips, azuredisk-csi, commercial-expanso-edge, containerd, kube-arangodb-fips, harbor, grype-fips, elastic-agent, src, redka, buildkitd, podman, datadog-agent-fips, grafana-operator, prometheus-elasticsearch-exporter, snyk-cli, falco-no-driver, apko-fips,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: grype, pulumi, flux, libnvidia-container, docker, kube-fluentd-operator, traefik, telegraf, kubernetes-dashboard, trino, prometheus, grafana-operator, cert-manager, dataplaneapi, kubernetes, istio, timestamp-authority, pinact, kots, melange, nerdctl,...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kyverno, zarf, tekton-chains, kubescape, slsa-verifier, buildah, kyverno-notation-aws, falcoctl, podman, skopeo, kots, aactl, undock, witness, gitsign, ratify...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: flux-source-controller, kyverno, zarf, tekton-chains, kubescape, slsa-verifier, buildah, kyverno-notation-aws, falcoctl, podman, skopeo, kots, aactl, undock, witness, gitsign, ratify...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: flux-source-controller, slsa-verifier, kubescape, skopeo-fips, chainctl, ratify, podman, kots, zarf, kubescape-server-fips, zarf-fips, tekton-chains, falcoctl-fips, prometheus-podman-exporter-fips, skopeo, buildah, kyverno, aactl, undock, kyverno-fips,...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: flux-source-controller, slsa-verifier, kubescape, skopeo-fips, chainctl, ratify, podman, kots, zarf, kubescape-server-fips, zarf-fips, tekton-chains, falcoctl-fips, prometheus-podman-exporter-fips, skopeo, buildah, kyverno, aactl, undock, kyverno-fips,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: commercial-expanso-edge, containerd, rancher-agent, kube-arangodb-fips, harbor, kubescape, chisel-fips, vitess, prometheus-elasticsearch-exporter, snyk-cli, trivy-operator, falco-no-driver, argocd-image-updater-fips, tigera-operator, skaffold-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: terraform-provider-tls, commercial-expanso-edge, containerd, crossplane-provider-azure-servicefabric, kube-arangodb-fips, rancher-agent, harbor, grype-fips, kubescape, crossplane-provider-azure-resources, buildkitd, kargo, chainctl, chisel-fips,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: terraform-provider-tls, commercial-expanso-edge, containerd, crossplane-provider-azure-servicefabric, kube-arangodb-fips, rancher-agent, harbor, grype-fips, kubescape, crossplane-provider-azure-resources, buildkitd, kargo, chainctl, chisel-fips,...

GHSA-VGWF-H737-FF37 vulnerabilities

Vulnerabilities for packages: commercial-expanso-edge, containerd, rancher-agent, kube-arangodb-fips, harbor, grype-fips, kubescape, longhorn-cli-fips, buildkitd, chainctl, chisel-fips, podman, vitess, datadog-agent-fips, prometheus-elasticsearch-exporter, snyk-cli, trivy-operator, falco-no-drive...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: commercial-expanso-edge, containerd, rancher-agent, kube-arangodb-fips, harbor, kubescape, chisel-fips, vitess, prometheus-elasticsearch-exporter, snyk-cli, trivy-operator, falco-no-driver, argocd-image-updater-fips, tigera-operator, skaffold-fips,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: commercial-expanso-edge, containerd, rancher-agent, kube-arangodb-fips, harbor, grype-fips, kubescape, chainctl, podman, vitess, prometheus-elasticsearch-exporter, snyk-cli, trivy-operator, falco-no-driver, argocd-image-updater-fips, apko-fips, jfrog-cli,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: kube-arangodb-fips, elastic-agent, kubescape, prometheus-elasticsearch-exporter, snyk-cli, cloudflared-fips, crossplane-provider-family-azure, crossplane-provider-aws-elasticsearch-fips, crossplane-provider-aws-route53resolver-fips, fulcio-fips, agentbeat,...